WWebPros

Products

Exploited and recent CVEs

• CVE-2026-41940 Critical 9.8 Exploited WebPros cPanel and WHM Authentication Bypass via Login Flow 98.5%
• CVE-2026-41940 Critical 9.8 Exploited WebPros cPanel and WHM Authentication Bypass via Login Flow 98.5%
• CVE-2026-41940 Critical 9.8 Exploited WebPros cPanel and WHM Authentication Bypass via Login Flow 98.5%
• CVE-2026-105476 High 8.8 Improper link resolution before file access in cPanel allows remote authenticated users to write arbitrary root-owned files and escalate privileges. 0.5%
• CVE-2026-105475 High 8.7 Improper neutralization of a NUL byte in cPanel allows remote attackers to read any mail account's calendar and contact data. 0.4%
• CVE-2026-105474 Critical 9.4 A server-side template injection exists in SolusVM 2 up to version 2.0.0-44576 that allows remote authenticated users to execute arbitrary code as root. 0.5%
• CVE-2026-93699 High 8.5 Argument injection in WP Toolkit for cPanel allows local users to execute arbitrary code as other accounts on the same server. 0.1%
• CVE-2026-93029 Critical 9.0 There is a stored XSS vulnerability allowing arbitrary code execution in the WHM Manage SSL Hosts interface. 0.5%
• CVE-2026-93029 Critical 9.0 There is a stored XSS vulnerability allowing arbitrary code execution in the WHM Manage SSL Hosts interface. 0.5%
• CVE-2026-93697 Critical 9.0 There is a stored XSS vulnerability allowing arbitrary code execution in the WHM Mass Modify Accounts interface. 0.5%
• CVE-2026-93697 Critical 9.0 There is a stored XSS vulnerability allowing arbitrary code execution in the WHM Mass Modify Accounts interface. 0.5%
• CVE-2026-93698 Critical 9.9 Insufficient validation allows arbitrary commands to be executed via the Multilang adminbin. 0.6%
• CVE-2026-93698 Critical 9.9 Insufficient validation allows arbitrary commands to be executed via the Multilang adminbin. 0.6%
• CVE-2026-87899 Critical 9.4 Execution with unnecessary privileges in cPanel allows remote authenticated users to execute arbitrary code with root privileges. 0.6%
• CVE-2026-68492 High 8.7 An untrusted search path vulnerability in Plesk from 18.0.34 before 18.0.80.8 and 18.0.81 before 18.0.81.1 allows remote authenticated users to execute arbitrary code as root via the "Plesk RESTful AP 0.7%
• CVE-2026-68492 High 8.7 An untrusted search path vulnerability in Plesk from 18.0.34 before 18.0.80.8 and 18.0.81 before 18.0.81.1 allows remote authenticated users to execute arbitrary code as root via the "Plesk RESTful AP 0.7%
• CVE-2026-68490 High 8.2 Incorrect permission assignment allows local users to obtain sensitive CalDAV/CardDAV information belonging to other accounts. 0.1%
• CVE-2026-87900 Critical 9.4 Argument injection in WP Toolkit for cPanel 6.11.2-10794 and earlier allows remote authenticated users to read arbitrary files and execute arbitrary code across customer accounts. 0.7%
• CVE-2026-87898 Critical 9.4 OS command injection in Plesk allows remote authenticated users to execute arbitrary code with root privileges. 1.1%
• CVE-2026-68491 Critical 9.4 An insufficient check allowed for the overwrite of arbitrary files via a symlink. 0.5%
• CVE-2026-68489 High 8.7 Static Code Injection in Plesk extensions "Ruby" before 1.6.6 and "Node.js Toolkit" before 2.5.0 allows remote authenticated users to execute arbitrary code as root via custom environment variables. 0.7%
• CVE-2026-68489 High 8.7 Static Code Injection in Plesk extensions "Ruby" before 1.6.6 and "Node.js Toolkit" before 2.5.0 allows remote authenticated users to execute arbitrary code as root via custom environment variables. 0.7%
• CVE-2026-67399 Critical 9.3 Deserialization of untrusted data in WHMCS 9.0.0 before 9.0.8 and 8.0.0 before 8.13.7 allows remote attackers to execute arbitrary code. 0.8%
• CVE-2026-65639 Critical 9.5 OS command injection in the advanced-rule parser of ConfigServer Security & Firewall allows a remote attacker who controls a configured allow/deny feed to execute arbitrary commands as root, due to in 1.4%
• CVE-2026-68487 Critical 9.9 Path traversal in Plesk's Backup Manager causes arbitrary file write as root by an authenticated customer. 0.6%
• CVE-2026-65638 Critical 9.2 Improper escaping of a request URL in ConfigServer Security & Firewall allows an unauthenticated remote attacker to execute arbitrary commands as the CSF service account via shell command injection. 2.3%
• CVE-2026-68488 Critical 9.9 A Time-of-check Time-of-use (TOCTOU) race condition leading to insecure symlink following in Plesk causes local privilege escalation to root via arbitrary file/directory ownership takeover. 0.4%
• CVE-2026-67401 Critical 9.9 A vulnerability in cPanel allows a mail-enabled account to achieve remote code execution as root through SQLi in EmailTrack component 0.9%
• CVE-2026-67397 High 8.5 Path traversal in Plesk 18.0.79.9 and earlier and 18.0.80 through 18.0.80.5 allows local users to execute arbitrary code as root. 0.2%
• CVE-2026-67402 Critical 9.2 An insecure Apache configuration in ConfigServer Security & Firewall maps /usr/bin as CGI programs through the Messenger v3 HTTPS virtual host. A remote unauthenticated attacker whose address is block 0.5%